Dashboard / CVE-2021-30116

CVE-2021-30116

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

CISA Known Exploited Vulnerability

Vendor / Product Kaseya — Virtual System/Server Administrator (VSA)
Date Added 2021-11-03
Remediation Due 2021-11-17
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2021-30116

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
kaseya vsa_agent < 9.5.0.24
kaseya vsa_server < 9.5.7a

References & Advisories (5)

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links